参考文档:
http://docs.saltstack.com/ref/states/all/salt.states.user.html
http://wiki.saltstack.cn/reproduction/managing_user_with_salt
用户管理
添加
/srv/salt/top.sls
test:
'minion1':
- user
/srv/salt/test/user.sls
zhangsan:
user.present:
- fullname: zhangsan
- shell: /bin/bash
- password: '$1$salt$jhDGCLRTZce0SErstR0DD/'
- home: /home/zhangsan
- uid: 1001
- gid: 1001
- groups:
- root
- zhangsan
- require:
- group: zhangsan
group.present:
- gid: 1001
> salt 'minion1' state.highstate
如何生成用户密码?
> openssl passwd -1 -salt 'test'
>
> Password: 输入密码
>
> $1$test$G37RycGyklOu.vZCVSoy2.
**删除**
/srv/salt/top.sls
test:
'minion1':
- user
/srv/salt/test/user.sls
zhangsan:
user.absent:
- purge: True #####delete user's home
- force: True #####force delete user
> salt 'minion1' state.highstate
**添加sudo用户**
/srv/salt/top.sls
test:
'minion1':
- user
/srv/salt/test/user.sls
zhangsan:
user.present:
- fullname: zhangsan
- shell: /bin/bash
- home: /home/zhangsan
- uid: 1001
- gid: 1001
- groups:
- root
- zhangsan
- require:
- group: zhangsan
group.present:
- gid: 1001
/etc/sudoers:
file.append:
- text:
- "zhangsan ALL=(ALL) NOPASSWD: ALL"
组管理
添加
/srv/salt/top.sls
test:
‘minion1’:
- group</pre>
/srv/salt/test/group.sls
test2:
group.present:
- gid: 1003</pre>
salt ‘minion1’ state.highstate
删除
/srv/salt/top.slstest:
‘minion1’:- group</pre>/srv/salt/test/group.sls
test2:
group.absent
salt ‘minion1’ state.highstate![]()